"Cisco Identity Intelligence is Cisco's first product to run entirely on an internally developed AI model, the company announced this week. The Foundation-sec-1.1-8B-Instruct model analyzes identity behavior and detects threats that would otherwise be difficult to detect. Cisco Identity Intelligence helps organizations identify identity-related risks. The system monitors who logs in, where that happens, and which device is used. By analyzing post-authentication signals, the solution recognizes patterns that traditional access controls often miss."
"These include unusual locations, abnormal use of privileges, session hijacking, and a so-called "MFA fatigue" attack. In the latter form, attackers spam MFA requests to a user, who regularly gives in to get rid of the notifications. Every week, Cisco emails users a summary of the most important identity-related events. Cisco points out that 2,000 customers rely on this service. From now on, these weekly digests will be generated by Cisco's own Foundation AI model."
Cisco Identity Intelligence runs entirely on an internally developed Foundation-sec-1.1-8B-Instruct AI model trained on cybersecurity and identity scenarios. The system analyzes identity behavior to detect threats such as unusual locations, abnormal privilege use, session hijacking, and MFA fatigue attacks. Monitoring covers who logs in, where, and which device is used, with analysis of post-authentication signals to recognize patterns that traditional access controls miss. Weekly email digests summarize notable identity events, risk trends, and cyber hygiene options for customers. Approximately 2,000 customers receive the service, and the digests will be generated by Cisco's own model. Internal training reduces external dependencies and aligns reasoning with SOC analysts’ methods, though development entails costs. Low model temperature helps maintain precision in the limited domain.
Read at Techzine Global
Unable to calculate read time
Collection
[
|
...
]